[Snyk] Upgrade @angular-devkit/build-angular from 17.3.1 to 20.3.2 by snyk-io[bot] · Pull Request #47 · Dargon789/mempool

snyk-io · 2025-10-10T15:45:11Z

Snyk has created this PR to upgrade @angular-devkit/build-angular from 17.3.1 to 20.3.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 181 versions ahead of your current version.
The recommended version was released 23 days ago.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	140	Proof of Concept
Denial of Service (DoS) SNYK-JS-HTTPPROXYMIDDLEWARE-8229906	140	Proof of Concept
Insecure Randomness SNYK-JS-UNDICI-8641354	140	Proof of Concept
Incorrect Authorization SNYK-JS-VITE-9512410	140	Mature
Incorrect Authorization SNYK-JS-VITE-9653016	140	Proof of Concept
Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	140	Proof of Concept
Origin Validation Error SNYK-JS-WEBPACKDEVSERVER-10300775	140	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELHELPERS-9397697	140	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELRUNTIME-10044504	140	Proof of Concept
Prototype Pollution SNYK-JS-EAZYLOGGER-8708044	140	Proof of Concept
Always-Incorrect Control Flow Implementation SNYK-JS-HTTPPROXYMIDDLEWARE-9691387	140	No Known Exploit
Improper Check for Unusual or Exceptional Conditions SNYK-JS-HTTPPROXYMIDDLEWARE-9691389	140	No Known Exploit
Improper Input Validation SNYK-JS-NANOID-8492085	140	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	140	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	140	Proof of Concept
Improper Access Control SNYK-JS-VITE-6531286	140	Proof of Concept
Information Exposure SNYK-JS-VITE-8023174	140	Proof of Concept
Origin Validation Error SNYK-JS-VITE-8648411	140	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	140	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	140	Proof of Concept
Information Exposure SNYK-JS-ELLIPTIC-8720086	140	Proof of Concept
Access Control Bypass SNYK-JS-VITE-9576207	140	Proof of Concept
Information Exposure SNYK-JS-VITE-9685035	140	Proof of Concept
Directory Traversal SNYK-JS-VITE-9919777	140	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-WEBPACK-7840298	140	Proof of Concept
Exposed Dangerous Method or Function SNYK-JS-WEBPACKDEVSERVER-10300777	140	Proof of Concept
Missing Release of Memory after Effective Lifetime SNYK-JS-UNDICI-10176064	140	Proof of Concept
Improper Access Control SNYK-JS-UNDICI-6564963	140	No Known Exploit
Improper Authorization SNYK-JS-UNDICI-6564964	140	No Known Exploit
Relative Path Traversal SNYK-JS-VITE-12558116	140	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-VITE-8022916	140	Proof of Concept

Release notes

Package name: @angular-devkit/build-angular

20.3.2 - 2025-09-17
No content.
20.3.1 - 2025-09-11
@ angular/build

Commit Description

add timestamp to bundle generation log

update vite to version 7.1.5
20.3.0 - 2025-09-10
20.3.0-rc.0 - 2025-09-10
20.2.2 - 2025-09-03
20.2.1 - 2025-08-27
20.2.0 - 2025-08-20
20.2.0-rc.1 - 2025-08-15
20.2.0-rc.0 - 2025-08-13
20.2.0-next.3 - 2025-08-08
20.2.0-next.2 - 2025-07-31
20.2.0-next.1 - 2025-07-23
20.2.0-next.0 - 2025-07-16
20.1.6 - 2025-08-13
20.1.5 - 2025-08-06
20.1.4 - 2025-07-30
20.1.3 - 2025-07-24
20.1.2 - 2025-07-23
20.1.1 - 2025-07-16
20.1.0 - 2025-07-09
20.1.0-rc.0 - 2025-07-01
20.1.0-next.3 - 2025-06-25
20.1.0-next.2 - 2025-06-18
20.1.0-next.1 - 2025-06-11
20.1.0-next.0 - 2025-06-05
20.0.6 - 2025-07-09
20.0.5 - 2025-07-01
20.0.4 - 2025-06-25
20.0.3 - 2025-06-18
20.0.2 - 2025-06-11
20.0.1 - 2025-06-04
20.0.0 - 2025-05-28
20.0.0-rc.4 - 2025-05-27
20.0.0-rc.3 - 2025-05-21
20.0.0-rc.2 - 2025-05-14
20.0.0-rc.1 - 2025-05-14
20.0.0-rc.0 - 2025-05-07
20.0.0-next.9 - 2025-04-30
20.0.0-next.8 - 2025-04-23
20.0.0-next.7 - 2025-04-23
20.0.0-next.6 - 2025-04-16
20.0.0-next.5 - 2025-04-09
20.0.0-next.4 - 2025-04-02
20.0.0-next.3 - 2025-03-26
20.0.0-next.2 - 2025-03-19
20.0.0-next.1 - 2025-03-13
20.0.0-next.0 - 2025-03-05
19.2.17 - 2025-09-17
@ angular/build

Commit Description

update vite to 6.3.6
19.2.16 - 2025-09-10
19.2.15 - 2025-06-11
19.2.14 - 2025-05-28
19.2.13 - 2025-05-21
19.2.12 - 2025-05-14
19.2.11 - 2025-05-07
19.2.10 - 2025-04-30
19.2.9 - 2025-04-23
19.2.8 - 2025-04-16
19.2.7 - 2025-04-09
19.2.6 - 2025-04-02
19.2.5 - 2025-03-26
19.2.4 - 2025-03-19
19.2.3 - 2025-03-13
19.2.2 - 2025-03-12
19.2.1 - 2025-03-05
19.2.0 - 2025-02-26
19.2.0-rc.0 - 2025-02-19
19.2.0-next.2 - 2025-02-12
19.2.0-next.1 - 2025-01-29
19.2.0-next.0 - 2025-01-23
19.1.9 - 2025-02-26
19.1.8 - 2025-02-19
19.1.7 - 2025-02-12
19.1.6 - 2025-02-05
19.1.5 - 2025-01-29
19.1.4 - 2025-01-22
19.1.3 - 2025-01-20
19.1.2 - 2025-01-17
19.1.1 - 2025-01-16
19.1.0 - 2025-01-15
19.1.0-rc.0 - 2025-01-08
19.1.0-next.2 - 2024-12-18
19.1.0-next.1 - 2024-12-12
19.1.0-next.0 - 2024-12-04
19.0.7 - 2025-01-08
19.0.6 - 2024-12-18
19.0.5 - 2024-12-12
19.0.4 - 2024-12-05
19.0.3 - 2024-12-04
19.0.2 - 2024-11-25
19.0.1 - 2024-11-21
19.0.0 - 2024-11-19
19.0.0-rc.3 - 2024-11-18
19.0.0-rc.2 - 2024-11-14
19.0.0-rc.1 - 2024-11-06
19.0.0-rc.0 - 2024-10-31
19.0.0-next.13 - 2024-10-23
19.0.0-next.12 - 2024-10-21
19.0.0-next.11 - 2024-10-16
19.0.0-next.10 - 2024-10-09
19.0.0-next.9 - 2024-10-02
19.0.0-next.8 - 2024-09-26
19.0.0-next.7 - 2024-09-19
19.0.0-next.6 - 2024-09-13
19.0.0-next.5 - 2024-09-12
19.0.0-next.4 - 2024-09-11
19.0.0-next.3 - 2024-09-04
19.0.0-next.2 - 2024-08-28
19.0.0-next.1 - 2024-08-22
19.0.0-next.0 - 2024-08-14
18.2.21 - 2025-09-10
18.2.20 - 2025-06-11
18.2.19 - 2025-04-23
18.2.18 - 2025-04-09
18.2.17 - 2025-04-02
18.2.16 - 2025-03-26
18.2.15 - 2025-03-13
18.2.14 - 2025-01-29
18.2.13 - 2025-01-29
18.2.12 - 2024-11-14
18.2.11 - 2024-10-30
18.2.10 - 2024-10-23
18.2.9 - 2024-10-16
18.2.8 - 2024-10-09
18.2.7 - 2024-10-02
18.2.6 - 2024-09-25
18.2.5 - 2024-09-18
18.2.4 - 2024-09-11
18.2.3 - 2024-09-04
18.2.2 - 2024-08-29
18.2.1 - 2024-08-21
18.2.0 - 2024-08-14
18.2.0-rc.0 - 2024-08-07
18.2.0-next.3 - 2024-07-31
18.2.0-next.2 - 2024-07-25
18.2.0-next.1 - 2024-07-17
18.2.0-next.0 - 2024-07-10
18.1.4 - 2024-08-07
18.1.3 - 2024-07-31
18.1.2 - 2024-07-24
18.1.1 - 2024-07-17
18.1.0 - 2024-07-10
18.1.0-rc.1 - 2024-07-03
18.1.0-rc.0 - 2024-06-26
18.1.0-next.3 - 2024-06-20
18.1.0-next.2 - 2024-06-13
18.1.0-next.1 - 2024-06-05
18.1.0-next.0 - 2024-05-29
18.0.7 - 2024-07-03
18.0.6 - 2024-06-26
18.0.5 - 2024-06-20
18.0.4 - 2024-06-13
18.0.3 - 2024-06-05
18.0.2 - 2024-05-29
18.0.1 - 2024-05-23
18.0.0 - 2024-05-22
18.0.0-rc.3 - 2024-05-21
18.0.0-rc.2 - 2024-05-08
18.0.0-rc.1 - 2024-05-02
18.0.0-rc.0 - 2024-05-01
18.0.0-next.5 - 2024-04-26
18.0.0-next.4 - 2024-04-25
18.0.0-next.3 - 2024-04-17
18.0.0-next.2 - 2024-04-03
18.0.0-next.1 - 2024-03-28
18.0.0-next.0 - 2024-03-21
17.3.17 - 2025-04-30
17.3.16 - 2025-04-09
17.3.15 - 2025-04-02
17.3.14 - 2025-03-26
17.3.13 - 2025-03-13
17.3.12 - 2025-02-12
17.3.11 - 2024-10-23
17.3.10 - 2024-09-25
17.3.9 - 2024-08-29
17.3.8 - 2024-05-22
17.3.7 - 2024-05-08
17.3.6 - 2024-04-25
17.3.5 - 2024-04-17
17.3.4 - 2024-04-11
17.3.3 - 2024-04-02
17.3.2 - 2024-03-25
17.3.1 - 2024-03-20

from @angular-devkit/build-angular GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

snyk-io · 2025-10-10T15:45:24Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Snyk has created this PR to upgrade @angular-devkit/build-angular from 17.3.1 to 20.3.2. See this package in npm: @angular-devkit/build-angular See this project in Snyk: https://app.snyk.io/org/dargon789/project/50846b0c-8658-4e4d-a327-21d5b21990c8?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Dargon789 force-pushed the snyk-upgrade-59afacacaf053c85ada5cc01917ea412 branch from 4dd9fff to bc859e4 Compare October 14, 2025 19:54

Dargon789 merged commit 434192e into master Oct 14, 2025
19 of 22 checks passed

Dargon789 deleted the snyk-upgrade-59afacacaf053c85ada5cc01917ea412 branch October 14, 2025 19:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @angular-devkit/build-angular from 17.3.1 to 20.3.2#47

[Snyk] Upgrade @angular-devkit/build-angular from 17.3.1 to 20.3.2#47
Dargon789 merged 1 commit intomasterfrom
snyk-upgrade-59afacacaf053c85ada5cc01917ea412

snyk-io bot commented Oct 10, 2025

@ angular/build

@ angular/build

Uh oh!

snyk-io bot commented Oct 10, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	add timestamp to bundle generation log
	update vite to version `7.1.5`

Conversation

snyk-io bot commented Oct 10, 2025

Snyk has created this PR to upgrade @angular-devkit/build-angular from 17.3.1 to 20.3.2.

Issues fixed by the recommended upgrade:

@ angular/build

@ angular/build

Uh oh!

snyk-io bot commented Oct 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

snyk-io bot commented Oct 10, 2025 •

edited

Loading